Jump to content

What are the sympoms of a DDOS?

- - - - -

  • Please log in to reply
6 replies to this topic

#1 Abomination

Abomination

    Zealot

  • Members
  • 1514 posts

Posted 28 January 2010 - 12:26 AM

I've got about 50 visitors from the same IP which resolves to this:
ip70-173-52-124.lv.lv.cox.net


Is this considered a micro-ddos?  :confused:


In a ddos is there thousands from the same IP?




Feel free to put this thread where ever you want too Nick  : )

#2 MjrNuT

MjrNuT

    Grand Master

  • Members
  • PipPipPipPipPip
  • 579 posts

Posted 28 January 2010 - 02:14 AM

Could be possible, but I don't think that hit count is substantial enough to be of any significance.

Denial-of-service attack - Wikipedia, the free encyclopedia

The IP resolves to Las Vegas.  Have you contacted your host for any input on your caution?
MjrNuT

"I disapprove of what you say, but I will defend to the death your right to say it."

#3 Nick

Nick

    Guru

  • Founders
  • 7455 posts
  • LocationTampa, FL

Posted 28 January 2010 - 05:11 AM

Moved to Servers and Hosting. ;)
Best Regards,
Nick

#4 kevin

kevin

    Zealot

  • Members
  • 1222 posts

Posted 28 January 2010 - 06:46 AM

Abomination said:

I've got about 50 visitors from the same IP which resolves to this:
ip70-173-52-124.lv.lv.cox.net



Looks like you need Ddos deflate installed.  Once an ip address makes more then X number of connections, its added to the host.deny file for X amount of time.

X - is a variable that you can set.

#5 SimpleMan

SimpleMan

    Adept

  • Members
  • 112 posts

Posted 28 January 2010 - 10:01 AM

Eh, one IP isn't much, even with 50 connections. You could term it a DOS, but it's pretty easy to stop. Use iptables or your server's firewall just to block the IP.

A DDOS attack is much larger - you pretty much know when you have a DDOS attack. Many years ago a hosting company that I worked for had one, the DC literally had to pull the plug because the attack was so massive and much of the current technology was not available yet. I'd say the difference between a DOS and DDOS is in the first "D" - which stands for distributed. a DDOS will come from multiple places (multiple IPs).

#6 kevin

kevin

    Zealot

  • Members
  • 1222 posts

Posted 28 January 2010 - 02:49 PM

CrazyTech said:

Use iptables or your server's firewall just to block the IP.

If they had ddos deflate installed, it would be automatic.  That way they would not have to worry about doing it manually.  

And it even works when your not at home, alseep, driving your car, watching a movie,,,,,

#7 MrChris

MrChris

    Newcomer

  • Members
  • PipPip
  • 15 posts

Posted 14 October 2010 - 01:20 PM

Lets break down what a ddos is there are few different types of ddos attacks there are ones that are done by php shells wish our php scripts and then we have botnet attacks are the worst... which are actual computers that are infected with this virus which they can control the computer as well.. which could make the traffic look more legit ... I am no pro this is just something I read up on I hope it helps .. If you need a recommended place if you are under heavy ddos attacks just pm me I'd be happy to give you few links
Check out shakehost.comone my favorite webhost .:)




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

About Admin Addict
Admin Addict is community for forum admins and staff to interact and share ideas. Admin Addict is a newbie friendly community so even if you're new to forums you will be welcome here.
Copyright © 2010-2012 Schwarz Network. All rights reserved.